SERVERS to SERVICES HOW MICROSOFT AZURE CAN MODERNISE YOUR IT INFRASTRUCTURE Marcus Harvey & Fahim Memon | 26 Feb 2019
Total Page:16
File Type:pdf, Size:1020Kb
SERVERS TO SERVICES HOW MICROSOFT AZURE CAN MODERNISE YOUR IT INFRASTRUCTURE Marcus Harvey & Fahim Memon | 26 Feb 2019 1 Technology for social justice | www.infoxchange.org Housekeeping » Please type questions in chat window » Session is being recorded » Feedback form via email after the webinar » Pricing and specifications are subject to change 2 Technology for social justice | www.infoxchange.org Sign up for your US$3,500 Azure Grant 1. Register your non profit status with ConnectingUp (AU), Techsoup (NZ) 2. Obtain your TechSoup token 3. Visit: http://eligibilityweb.azurewebsites.net/#/ngohome and enter your token 4. Set up Office 365 non-profit trial (if not already using it) 5. Activate Azure AD subscription 6. Return to http://eligibilityweb.azurewebsites.net/#/ngohome and enter your token 7. Select Azure: enter Office 365 tenant admin email as the Account Owner Live ID 8. Microsoft will email you within 24 hours with a link to activate Azure 9. Sign in with your Office 365 tenant admin credentials before activating 10. Credit card details required at sign up and will be charged if usage exceeds $3,500 (around AU$5,000) 3 Technology for social justice | www.infoxchange.org Servers to Services Examples Server Microsoft Azure Azure SQL Office 365 Switch Amazon Web Services Azure Domain Services Salesforce Router IBM Softlayer Google Apps 4 Technology Airfor social conditioning justice | www.infoxchange.orgGoogle Cloud Xero What is Microsoft Azure 5 Technology for social justice | www.infoxchange.org What can I do with Microsoft Azure? (in real practical terms for NFPs) Compute 1.• VirtualServer machines hosting e.g. domain controller/file * • Cloud Services • Servicearchives/RDP Fabric Server • Batch 2.• SchedulerBackup storage 3. Business continuity/ disaster recovery 4. Database hosting 5. Website hosting 6 Technology for social justice | www.infoxchange.org Azure IaaS Virtual Machines » Scale from 1 Core/768MB RAM ($22/month) - 32Core/448GB RAM ($9,144/month) » No minimum commit. Switch tiers up and down as needed (Reboot required) » Both Windows and Linux OS supported » New Ev3 class VMs can run Hyper-V role to host nested VMs » Use Availability sets to ensure 99.9% uptime SLA » Deploy in 45 mins using portal.azure.com, PowerShell, or ARM templates » Price differs based on region (US West cheapest, Australia more expensive) » Price has fallen 29% since 2015 (A2 @ $0.288/hr vs A2_v2 @ $0.203/hr) 7 Technology for social justice | www.infoxchange.org Azure Virtual Networking » Azure VMs runs off IPv4 virtual network with static or dynamic IP options » Azure Virtual Gateway & Supported router when site-site or user VPN needed » https://docs.microsoft.com/en-au/azure/vpn-gateway/vpn-gateway-about-vpn-devices » Network Security Groups for virtual firewall on top of OS firewall » Load balancing and Application firewall options » Cost based on SLA, Throughput, and number of VPN tunnels required 8 Technology for social justice | www.infoxchange.org Azure storage » Basis for Azure VMs, Databases, Web Apps, and backups » Standard or Premium (SSD) tiers depending on performance needs » Default level of redundancy (LRS) keeps 3 copies in same data centre » Geo redundancy available at added cost » Access via storage keys with encryption available » Can store files directly into containers using HTTPS or SMB3.0 (No NTFS permissions) » Each Azure VM comes with a 127GB OS disk with the option of adding 1TB disks for extra storage (e.g. F:\) 9 Technology for social justice | www.infoxchange.org Azure Sydney data centre Domain Controller File/Print Server Case Study A2 VM A2 VM + 600GB storage Secure credential sync Exchange Online Sharepoint Online Office365 tenant Azure Gateway Direct access site-to-site VPN Email and Public Internet site-to-site VPN 100Mbps+ Internet 100Mbps+ Internet documents Site-to-site VPN Azure Supported router Azure Supported router Windows 10 Laptop Windows 10 PC Windows 10 Laptop Windows 10 PC Domain joined Domain joined Domain joined Domain joined Office 2016 Office 2016 Office 2016 Office 2016 Network printer Network printer Melbourne office Sydney office 10 Technology for social justice | www.infoxchange.org Azure Backup and Recovery » Stored directly in Microsoft Azure Storage » Allow you to set region and retention » Local Agent required on server (Windows 2008 R2 or higher) » Scratch space required on local server. At least 5% of capacity » System State backup available through advanced settings. https://docs.microsoft.com/en-us/azure/backup/backup-azure-system-state » Azure Site Recovery to replicate Hyper-V Servers in Azure (Server 2012 R2 or higher) » Azure matches a VM size based on your on-premises VM » Only charged VM costs when you fail over 11 Technology for social justice | www.infoxchange.org Azure SQL » PaaS replacement for SQL Servers, either on-premises or as Azure VMs » MS handle patching of SQL Server and base Operating System » Start at $7/month for 2GB DB size. Maximum of 4TB ($9000+/month) » 99.9% SLA or higher » Change tiers without downtime » Applications must support connecting to Azure SQL. Talk to your app vendor » Geo replication and automatic backups available, and included in some service plans » Manage in portal or using traditional SSMS tool 12 Technology for social justice | www.infoxchange.org Azure AD Domain Services » PaaS replacement for Domain Controllers » MS handle patching of DCs and uptime » Uses Azure AD username and password as an AD identity » User, password, group changes through same interface as Office 365 accounts » Tied to a single virtual network. » Can have multiple Domains in the same Subscription through different networks » Domain join Azure VMs and desktops via VPN for Group Policy » Integrates with Azure AD Multi-Factor Authentication ($1.78 user/month) » Starting at $142.14/month 13 Technology for social justice | www.infoxchange.org Hosting your public website » Azure web apps support wordpress and many popular platforms » Or create a blank web app and connect via FTP, Visual Studio or Github » Supports .Net, PHP, Node.JS, Python, Java, Classic ASP, or any FastCGI handler » Deployment slots for seamless switching between dev and production » Automatic daily backups 14 Technology for social justice | www.infoxchange.org Implementation considerations » Budget will be allocated, including time and dollars » Bandwidth is adequate. Especially to deal with outbound traffic increase » Application licensing is transferable to run on cloud services (e.g. License Mobility) » Supported router for site-site VPN » Only Windows Server 2008 R2 SP1 and higher can run as an Azure VM » Test your deployments 2 weeks before go-live day. You may need MS Support to deploy in certain locations 15 Technology for social justice | www.infoxchange.org Reasons you might still need a server » Centralised workforce » Large files (e.g. hi res images or video) » Low bandwidth Internet connection » Prefer fixed or upfront costs (even if higher) » Pursuing hybrid approach for complex server environments 16 Technology for social justice | www.infoxchange.org WHAT COULD US$3,500 GET ME IN AZURE? 17 Technology for social justice | www.infoxchange.org Azure Case study cost summary Service Type Description Purpose Estimated monthly cost Virtual server 2x Standard virtual machine(s), A2v2 (2 Hosted Domain controller, file archive, $301.35 cores, 4 GB RAM, 135 GB disk, print, AAD connect $0.203/hr) size: 744 hours VPN Gateway Standard tier, 744 gateway hours, Manage secure data transfer between $191.51 100GB outbound internet Azure and Office Storage 600Gb storage. Basic tier, LRS Storage of 600Gb of files and backups $61.18 redundancy, 100000 transactions Monthly Total $554.04 Annual Total $6,648.53 Annual Total minus AU$5000 credit AU$1,648.53 Support from Microsoft available from $36.94/month (not possible to use the grant for this) All prices shown are in Australian Dollar ($). This is a summary estimate, not a quote. For up to date pricing information please visit https://azure.microsoft.com/pricing/calculator/ 18 Technology for social justice | www.infoxchange.org Move a small 2 tier app into Azure Service type Custom name Description Estimated Cost Virtual Machines 1 virtual machine(s) x 744 hours: A1 v2: 1 SQL VM for database not compatible $72.02 cores, 2 GB RAM, 10 GB disk with Azure SQL Storage Block Blob Storage type, LRS redundancy, 1TB SQL Storage based on VM $26.99 Standard – Blob Storage account tier template AADDS Free tier, per-user MFA billing model, 0 MFA Azure AD Domain Services for users to $142.14 user(s), 25001-100000 directory objects log in with Office 365 credentials Virtual Machines 1 virtual machine(s) x 744 hours: A2 v2: 2 RDP VM (1 - 4 users) for application $150.67 cores, 4 GB RAM, 20 GB disk access Monthly Total $391.83 Annual Total $4,701.91 Annual Total minus $5000 credit Zero Support from Microsoft available starting at $36.94/month All prices shown are in Australian Dollar ($). This is a summary estimate, not a quote. For up to date pricing information please visit https://azure.microsoft.com/pricing/calculator/ 19 Technology for social justice | www.infoxchange.org Move a 2 tier app into Azure + Azure SQL Service type Custom name Description Estimated Cost Azure SQL Single Database, Standard tier, S0 level, 10 Azure SQL DB up to 250GB $21.02 DTUs, 250 GB storage per DB AADDS Free tier, per-user MFA billing model, 0 MFA Azure AD Domain Services for users to $142.14 user(s), 25001-100000 directory objects log in with Office 365 credentials Virtual Machines 1 virtual machine(s) x 744 Hours, A2m v2: 2 RDP VM (5 - 10 users) for application $255.86 cores, 16 GB RAM access Monthly Total $419.02 Annual Total $5,028.28 Annual Total minus $5000 credit $28.28 Support from Microsoft available starting at $36.94/month All prices shown are in Australian Dollar ($).